CVE-2026-5252 z-9527 admin Message Create Endpoint message.js cross site scripting

A security flaw has been discovered in z-9527 admin 1.0/2.0. Affected is an unknown function of the file /server/routes/message.js of the component Message Create Endpoint. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been releas...

CVE-2026-5248

A vulnerability has been found in gougucms 4.08.18. This affects the function regsubmit of the file gougucms-master\app\home\controller\Login.php of the component User Registration Handler. Such manipulation of the argument level leads to dynamically-determined object attributes. The attack may b...

EUVD-2026-17689

A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The impacted element is the function...

GHSA-GHQ9-VC6F-8QJF TorchGeo Remote Code Execution Vulnerability

Impact TorchGeo 0.4–0.6.0 used an eval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose torchgeo.models.getweight or torchgeo.trainers as an external API could be affected. Patches The eval statement wa...

PT-2026-29477

A vulnerability was found in Sanster IOPaint 1.5.3. Impacted is the function get file of the file iopaint/file manager/file manager.py of the component File Manager. Performing a manipulation of the argument filename results in path traversal. The attack is possible to be carried out remotely. Th...

ROS-20260401-73-0033

A vulnerability in the createHook function of the asynchooks module of the Node.js software platform is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260401-73-0015

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

ROS-20260401-73-0011

A vulnerability in the pngimagereaddirectscaled function of the libpng library is related to reading data outside of buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to gain unauthorized access to protected information or cause denial of service...

Linux kernel media data preparation driver Heap Buffer Overflow DoS

The vulnerability of the tozoran function in the drivers/staging/media/zoran/zoran.h file of the Linux kernel’s media preparation support driver module is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux SMB Direct recv_done() Buffer Overflow

The vulnerability of the recvdone function in the fs/smb/client/smbdirect.c module, which is part of the SMB client support in Linux kernel, is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, an...

Linux ax25_rt_device_down Heap Buffer Overflow DoS

The vulnerability of the ax25rtdevicedown function in the include/net/ax25.h module of the Linux operating system is related to improper memory release „memory leak“. Exploiting this vulnerability can allow an attacker to cause a system failure...

OpenStack Vitrage _create_query_function() Unauthenticated Access

The vulnerability of the createqueryfunction function in the application programming interface of OpenStack Vitrage’s failure analysis and fault management software is related to the lack of measures taken to neutralize the instructions in the dynamically executed code. Exploiting this...

EROFS Heap Buffer Overflow DoS

The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

ROS-20260401-73-0026

A vulnerability in the pngsetquantize function of the libpng PNG raster graphics library is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code using a specially generated PNG file...

ROS-20260401-73-0017

A vulnerability in the pngdoquantize function of the pngrtran.c component of the PNG Libpng bitmap graphics library is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability may allow an attacker to gain access to confidential data and cause a denial of...

Secure Network Function Computation for General Target and Security Functions

Secure network function computation is a critical research direction in network coding, which aims to ensure that the target function is correctly computed at the sink node while preventing the wiretapper from obtaining any information about the security function. In this paper, we focus on the...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the iavfallocqvectors function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ubifsreleasefolio function in the fs/ubifs/file.c module of the Linux kernel’s file system is related to copying buffers without checking their size a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux S390 Kernel Heap Buffer Overflow DoS

The vulnerability of the zcdncreate function in the drivers/s390/crypto/zcryptapi.c module of the Linux S390 kernel-based cryptography driver lies in the absence of any restrictions or regulations regarding resource allocation. Exploiting this vulnerability could allow a hacker to cause service...

Linux debugfs file removed buffer overflow DoS

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...